Using a web server to obtain service data for a failed software application

ABSTRACT

An apparatus and a computer program product include a non-volatile computer readable medium and non-transitory program instructions embodied therein, the program instructions being configured to be executable by a processor to cause the processor to perform operations. The operations may include running a web server on a virtual machine that is running software application and an operating system that supports the software application, causing the operating system to obtain and provide service data for the software application after failure of the software application, causing the web server to receive the service data from the operating system, and causing the web server to send the obtained service data to an entity that is outside the virtual machine.

BACKGROUND

The present disclosure relates to methods for obtaining service data fora software application that has experienced a failure.

BACKGROUND OF THE RELATED ART

A software appliance includes a software application combined with justenough operating system to support the software application. Forexample, the software appliance may include an embedded Linux image.Software that is shipped as a software appliance has the advantage thatit is more secure. Some software appliances may have Secure Shell (SSH)disabled to prevent unauthorized access to the software appliance.However, when the software application takes a hard failure, thesoftware appliance can make it almost impossible to debug the softwareapplication. In the situation of a hard failure, the softwareapplication can no longer be accessed either from a browser pointed tothe Internet Protocol (IP) address of the application or through thesoftware application's Application Programming Interface (API).Accordingly, there is no available interface that would enable a clientto collect service data or allow the owners of the software appliance todebug the issue. Some amount of failure analysis might be facilitated bytaking a snapshot of a virtual machine that runs the software appliance,but a virtual machine image can be very large and hard to transfer.

BRIEF SUMMARY

Some embodiments provide a computer program product comprising anon-volatile computer readable medium and non-transitory programinstructions embodied therein, the program instructions being configuredto be executable by a processor to cause the processor to performoperations. The operations may comprise running a web server on avirtual machine that is running a software application and an operatingsystem that supports the software application, causing the operatingsystem to obtain and provide service data for the software applicationafter failure of the software application, causing the web server toreceive the service data from the operating system, and causing the webserver to send the service data to an entity that is outside the virtualmachine.

Some embodiments provide an apparatus comprising at least onenon-volatile storage device storing program instructions, and at leastone processor configured to process the program instructions, whereinthe program instructions are configured to, when processed by the atleast one processor, cause the apparatus to perform operations. Theoperations may comprise running a web server on a virtual machine thatis running a software application and an operating system that supportsthe software application, causing the operating system to obtain andprovide service data for the software application after failure of thesoftware application, causing the web server to receive the service datafrom the operating system, and causing the web server to send theservice data to an entity that is outside the virtual machine.

BRIEF DESCRIPTION OF THE SEVERAL VIEWS OF THE DRAWINGS

FIG. 1 is a diagram of a computer system that supports the operation ofa virtual machine that may run a software application.

FIG. 2 is a diagram of a virtual machine including a software applianceand web server accessible to a user computer.

FIG. 3 is a diagram of a virtual machine including a software applianceand a web server.

FIG. 4 is a diagram of a server.

FIG. 5 is a flowchart of operations.

DETAILED DESCRIPTION

Some embodiments provide a computer program product comprising anon-volatile computer readable medium and non-transitory programinstructions embodied therein, the program instructions being configuredto be executable by a processor to cause the processor to performoperations. The operations may comprise running a web server on avirtual machine that is running a software application and an operatingsystem that supports the software application, causing the operatingsystem to obtain and provide service data for the software applicationafter failure of the software application, causing the web server toreceive the service data from the operating system, and causing the webserver to send the service data to an entity that is outside the virtualmachine.

Some embodiments of the operating system running in the virtual machinemay have a cryptographic network protocol, such as Secure Shell (SSH),disabled at the time the software application experiences a failure.Alternatively, the operating system running in the virtual machine maybe deployed without cryptographic network protocol functionality or mayhave all supported cryptographic network protocols disabled. Whiledisabling Secure Shell may prevent unauthorized access to the softwareapplication during deployment and normal operation, disabling access viaSecure Shell may also make it more difficult to analyze the cause of asoftware application failure. The web server running within the samevirtual machine as the failed software application may be used to obtaina file or part of a file that includes service data for the softwareapplication during the time period leading up to a failure of thesoftware application.

A web server is software that can satisfy World Wide Web clientrequests. In some embodiments, the web server may obtain service datafor the software application by requesting the service data from anoperating system running on the virtual machine. The operating systemmay be a full operating system or just enough operating system tosupport to the software application and web server. In some embodiments,causing the operating system to obtain and provide the service data maycomprise instructing the operating system to execute a command on thesoftware application, wherein the service data comprises data that theoperating system obtains as a result of executing the command on thesoftware application. The data obtained by executing the command may bedifferent than the service data that describes the operation of thesoftware application.

In some embodiments, the service data for the software application mayinclude operating data for the software application leading up to afailure of the software application. For example, the service data maybegin upon the occurrence of some event, such as a detected instability.In another example, the service data may be continuously collected, butolder data is discarded when it is no longer relevant to the currentoperation of the software application. Upon failure of the softwareapplication, the service data is no longer discarded such that data forthe time period leading up to a failure is captured. Optionally, theservice data may be retained for a sliding window of time having apredetermined length. Furthermore, the service data may be stored in apredetermined directory, predetermined file extension, or otheridentifiable characteristic that allows the operating system to locatethe service data. In one example, the service data may be a FirstFailure Data Capture file.

Some embodiments cause the web server to obtain and send the servicedata in response to receiving an instruction from a user computer. Forexample, the user computer may be a computer belonging to the user thatlaunched or owns the software application, or a system management nodethat is used by a system administrator to manage a computer systemwithin which the virtual machine is run. Alternatively, the web servermay send the service data to a process outside the virtual machine wherethe software application has failed. As a result, the service data isthen available as needed from a process that has not experienced afailure.

Some embodiments may cause the web server to generate a user interfacepage for display on a web browser running on a user computer, andreceive user input through the user interface page. The user input mayinclude instructing the web server to obtain service data for thesoftware application and send the obtained service data to the usercomputer or other destination. Optionally, the operating system may becaused to obtain and provide service data is in response to inputreceived through the user interface page

In some embodiments, the web server may not send the service data to theuser computer unless the web server receives an access code from theuser computer that matches an access code required by the web server.Alternatively, the web server may be caused to send the service data tothe user computer in response to receiving an access code from the usercomputer that matches an access code required by the web server. Otherforms of user authentication may performed as a condition to gainingaccess to the service data. In one option, the web server may obtain anidentifier for the software application and generate the required accesscode by applying a predetermined operation to the identifier. In onenon-limiting example, the identifier may be a universally uniqueidentifier and the predetermined operation may be a hash function.Furthermore, the web server may generate the required access code byapplying a predetermined operation to the identifier and a current date.

Some embodiments of the computer program product may include programinstructions configured to be executable by a processor to cause theprocessor to run the software application on the virtual machine and/orrun the virtual machine on a compute node.

Some embodiments provide an apparatus comprising at least onenon-volatile storage device storing program instructions, and at leastone processor configured to process the program instructions, whereinthe program instructions are configured to, when processed by the atleast one processor, cause the apparatus to perform operations. Theoperations may comprise running a web server on a virtual machine thatis running a a software application and an operating system thatsupports the software application, causing the web server to obtainservice data for the software application after failure of the softwareapplication, and causing the web server to send the obtained servicedata to a user computer.

The foregoing apparatus may include further program instructions forimplementing or initiating any one or more operation or feature of thecomputer program products described herein. Accordingly, a separatedescription of these operations or features will not be duplicated inthe context of an apparatus.

FIG. 1 is a diagram of a computer system 10 that supports the operationof a virtual machine that may run a software application. The computersystem 10 may provide, or operate in, a “cloud” environment to provide apool of resources. The computer system 10 includes a plurality ofcompute nodes, referred to as servers. Each server supports one or morevirtual machines (VMs). A virtual machine is a software implementation(emulation) of a physical computer. A single hardware compute node, suchas a server, may be able to support multiple virtual machines, whereeach virtual machine may run the same, different, or shared operatingsystems. In one embodiment, each virtual machine can be specificallytailored and reserved for executing software tasks: (1) of a particulartype (e.g., database management, graphics, word processing etc.); (2)for a particular user, subscriber, client, group or other entity; (3) ata particular time of day or day of week (e.g., at a permitted time ofday or schedule); etc.

As shown in FIG. 1, the computer system 10 includes a plurality ofservers 20 a-20 n (where “a-n” indicates an integer number of servers).Each server runs a hypervisor 22a-22n that supports one or more virtualmachines (VMs) 24. The servers are coupled to a management node 26,which may operate a provisioning manager that assists with launching thevirtual machines 24 and/or workloads, such as a software application, tobe run in the virtual machines.

Furthermore, each server 20 a-n is shown having access to some type ofdata storage device 28, although the data storage device may be internalto the server, directly connected external to the server, or remotelyaccessible to the server. Guest software applications, operatingsystems, web servers or other applications may, for example, be storedon a data storage device 28 or remotely on the network attached storage30 such that data may be transmitted to one of the storage devices 28over the network 32 as needed. The network 32 may be a public network(e.g., the Internet) or a private network (e.g., a virtual privatenetwork or a local area network).

A system management node 34 is coupled to the management node 26 througha management interface 38. A system management application 36 running onthe system management node 34 may be responsible for launching andmanaging the virtual machines 24 or the workloads running the virtualmachines 24 on a particular one of the servers 20 a-n. A virtual machineworkload is a software task that may be executed on any of the virtualmachines within the computing system using the resources allocated tothe virtual machine.

A workload may be submitted from the system management node 34 or from auser computer 40. For example, the user computer 40 may run a browserthat can communicate with the management node 26 or the systemmanagement node 34 over the network 32. When a workload is submitted,the management node 26 may configure a virtual machine 28 on one of theservers 20 a-n to execute the requested software task. Some embodimentsmay configure a virtual machine to run a software appliance and a webserver, where the software appliance includes a software application andan operating system that supports the software application.

FIG. 2 is a diagram of a virtual machine 24 including a softwareapplication 62, operating system 64 and web server 56, wherein the webserver 56 is accessible to the browser 42 running on the user computer40. The software application 62 may be identified by an identifier 52and may generate service data 54 that details the operation of thesoftware application 62. The web server 56 may include a script 58 thatmay be executed in response to a user instruction entered into thebrowser 42 and directed to the web server 56. The script 58 may causethe web server 56 to provide instructions to the operating system 64 andreceive service data 54 and/or other data from the operating system 64.The service data 54 and/or other data may be forwarded from the webserver 56 to the web browser 42 of the user computer 40 or othercomputer.

FIG. 3 is a diagram of the virtual machine 24 in communication with thesystem management application 36 and the web browser 42 as collectivelyshown in FIGS. 1 and 2. Furthermore, the virtual machine 24 includes asoftware appliance 50, which includes the software application 62,operating system 64 and web server 56 as shown in FIG. 2. The web server56 may be deployed at the same time as the software appliance 50. Thevirtual machine 24 may be deployed and managed by a virtual machinemanagement module 60 of the system management application 36.

Some embodiments of the software application 62 may be given anapplication identifier 52, such as a Universally Unique Identifier(UUID), which may be automatically generated by the software applicationwhen the software application is started up for the first time. Theidentifier 52 may be shared with access code validation logic 66 that ispart of the web server 56 running in the virtual machine along with thesoftware appliance and may also be shared with access code generationlogic 68 that is part of the system management application 36 managingthe virtual machine 24. For example, the system management application36 may be an instance of LENOVO XClarity Administrator system managementsoftware. Both the access code validation logic 66 of the web server 56and the access code generation logic 68 of the system managementapplication 36 may be provided with an identical operation, such as aspecific hash function, for generating an access code using theidentifier 52 and some other information, such as a current date (i.e.,month, day and year). Since the web server and the system managementapplication are provided with the identical operation, they will each beable to generate the same access code when the inputs (i.e., theidentifier, etc.) to the operation are the same. Some embodiments of theoperation may use the identifier and the current date as inputs, suchthat the resulting access code is specific to a particular softwareapplication 62 associated with the identifier 52 and is valid for only asingle day (i.e., until the current date changes).

When the virtual machine 24 is running, user interface generation logic70 of the web server 56 may form a display on a page in the web browser42 on the user's console. The page may be specific to the virtualmachine 24 and may display the identifier 52 of the software applicationrunning on the virtual machine as well as an Internet Protocol addressthat the software application 62 is running on. The page may furtherinclude an input field and some buttons. In some embodiments, a buttonon the web browser 42 may cause the web server 56 to execute a script,such as the service data handler 72.

Occasionally, a user may determine that the software application 62 isnot performing normally, such as when the user interface of the softwareapplication fails to respond to user interaction. When the userdetermines that the software application 62 has experience a failure,the user may request an access code that can be used for a limited timeto cause the web server to run a script. For example, the access codemay be generated by the management application 36 using the access codegeneration logic 68. The user may then obtain the access code in anymanner, such as via a phone call, text message, email, or web interfacewith software support personnel that can run the access code generationlogic 68. Furthermore, the access code may be obtained through anautomated system.

After the user has obtained an access code from the access codegeneration logic 68 of the system management application 36, the usermay enter the access code via the web browser 42 (see dashed arrow 74)into a user interface page of the web server 56 associated with thefailed software application 62. The access code validation logic 66 ofthe web server 56 will then attempt to validate the code. In order tovalidate the code, the web server must retrieve the applicationidentifier 52 from the software application 62 and generate an accesscode using the same operation that the access code generation logic 68used to generate the access code provided to the user. If the code inputby the user matches the code generated by the web server 56, then theaccess code is validated and the web server 56 will enable the servicedata handler 72. In one example, the service data handler is a script,such as a “bash script” that performs a set of Linux commands.

After validating the access code entered by the user, the service datahandler 72 (i.e., the “script”) may be run against the failed softwareapplication 62 in response to the user clicking on a specific buttondisplayed on the web server's user interface page. The commands withinthe service data handler 72 (i.e., the “script”) instruct the operatingsystem 64 to locate and retrieve service data 54 related to the previousoperation and failure of the software application 62. The service data54 may include logs and/or files that have specific file extensions orare located in specific directories. In one example, the operatingsystem 64 collects the service data 54 in the form of a First FailureDate Capture (FFDC) file that may include a copy of one or more logsand/or files, but may also include output from running some operatingsystem commands. After the service data 54 has been collected, the webserver 56 then allows the user to download a copy of the service data totheir workstation or user computer. For example, the service data may bedownloaded as a zip file or archive file via the web browser 42.

FIG. 4 is a diagram of a server 100 that may, without limitation, berepresentative of the configuration of one of the servers 20 a-n ofFIG. 1. Furthermore, the architecture of the server 100 may, withoutlimitation, also be generally representative of the hardwarearchitecture of the management node 26, the system management node 34,and/or the user computer 40. However, the embodiments are not limited tothe particular architecture shown.

The server 100 includes a processor unit 104 that is coupled to a systembus 106. The processor unit 104 may utilize one or more processors, eachof which has one or more processor cores. A graphics adapter 108, whichdrives/supports the display 120, is also coupled to system bus 106. Thegraphics adapter 108 may, for example, include a graphics processingunit (GPU). The system bus 106 is coupled via a bus bridge 112 to aninput/output (I/0) bus 114. An I/O interface 116 is coupled to the I/Obus 114. The I/O interface 116 affords communication with various I/Odevices, including a camera 110, a keyboard 118 (such as a touch screenvirtual keyboard), and a USB mouse 124 via USB port(s) 126 (or othertype of pointing device, such as a trackpad). As depicted, the server100 is able to communicate with other network devices over the network32 using a network adapter or network interface controller 130.

A hard drive interface 132 is also coupled to the system bus 106. Thehard drive interface 132 interfaces with a hard drive 134. In apreferred embodiment, the hard drive 134 communicates with system memory136, which is also coupled to the system bus 106. System memory isdefined as a lowest level of volatile memory in the computer 100. Thisvolatile memory may include additional higher levels of volatile memory(not shown), including, but not limited to, cache memory, registers andbuffers. Data that populates the system memory 136 may include anoperating system (OS) 138 and application programs 144. Embodiments mayinclude application programs that include a hypervisor 22 and one ormore virtual machine 24, including the software application 62,operating system 64 and web server 56.

The operating system 138 for the server 100 may include a shell 140 forproviding transparent user access to resources such as the applicationprograms 144. Generally, the shell 140 is a program that provides aninterpreter and an interface between the user and the operating system.More specifically, the shell 140 executes commands that are entered intoa command line user interface or from a file. Thus, the shell 140, alsocalled a command processor, is generally the highest level of theoperating system software hierarchy and serves as a command interpreter.The shell may provide a system prompt, interpret commands entered bykeyboard, mouse, or other user input media, and send the interpretedcommand(s) to the appropriate lower levels of the operating system(e.g., a kernel 142) for processing. Note that while the shell 140 maybe a text-based, line-oriented user interface, embodiments may supportother user interface modes, such as graphical, voice, gestural, etc.

As depicted, the operating system 138 also includes the kernel 142,which may include lower levels of functionality for the operating system138, including providing essential services required by other parts ofthe operating system 138 and application programs 144. Such essentialservices may include memory management, process and task management,disk management, and mouse and keyboard management. However, theoperating system 138 of this representative server 100 should not beconfused with the operating system that may be included in the softwareappliance 50 that may run on a virtual machine 24. For example, eachvirtual machine may include and run a separate operating system tosupport a software application and web server that run within thevirtual machine.

FIG. 5 is a flowchart of operations 90. Operation 92 includes running aweb server on a virtual machine that is running a software applicationand an operating system that supports the software application.Operation 94 includes the operating system to obtain and provide servicedata for the software application after failure of the softwareapplication. Operation 96 includes causing the web server to receive theservice data from the operating system. Operation 98 includes causingthe web server to send the service data to an entity that is outside thevirtual machine.

As will be appreciated by one skilled in the art, embodiments may takethe form of a system, method or computer program product. Accordingly,embodiments may take the form of an entirely hardware embodiment, anentirely software embodiment (including firmware, resident software,micro-code, etc.) or an embodiment combining software and hardwareaspects that may all generally be referred to herein as a “circuit,”“module” or “system.” Furthermore, embodiments may take the form of acomputer program product embodied in one or more computer readablemedium(s) having computer readable program code embodied thereon.

Any combination of one or more computer readable storage medium(s) maybe utilized. A computer readable storage medium may be, for example, butnot limited to, an electronic, magnetic, optical, electromagnetic,infrared, or semiconductor system, apparatus, or device, or any suitablecombination of the foregoing. More specific examples (a non-exhaustivelist) of the computer readable storage medium would include thefollowing: a portable computer diskette, a hard disk, a random accessmemory (RAM), a read-only memory (ROM), an erasable programmableread-only memory (EPROM or Flash memory), a portable compact discread-only memory (CD-ROM), an optical storage device, a magnetic storagedevice, or any suitable combination of the foregoing. In the context ofthis document, a computer readable storage medium may be any tangiblemedium that can contain, or store a program for use by or in connectionwith an instruction execution system, apparatus, or device. Furthermore,any program instruction or code that is embodied on such computerreadable storage media (including forms referred to as volatile memory)that is not a transitory signal are, for the avoidance of doubt,considered “non-transitory”.

Program code embodied on a computer readable storage medium may betransmitted using any appropriate medium, including but not limited towireless, wireline, optical fiber cable, RF, etc., or any suitablecombination of the foregoing. Computer program code for carrying outvarious operations may be written in any combination of one or moreprogramming languages, including an object oriented programming languagesuch as Java, Smalltalk, C++or the like and conventional proceduralprogramming languages, such as the “C” programming language or similarprogramming languages. The program code may execute entirely on theuser's computer, partly on the user's computer, as a stand-alonesoftware package, partly on the user's computer and partly on a remotecomputer or entirely on the remote computer or server. In the latterscenario, the remote computer may be connected to the user's computerthrough any type of network, including a local area network (LAN) or awide area network (WAN), or the connection may be made to an externalcomputer (for example, through the Internet using an Internet ServiceProvider).

Embodiments may be described with reference to flowchart illustrationsand/or block diagrams of methods, apparatus (systems) and computerprogram products. It will be understood that each block of the flowchartillustrations and/or block diagrams, and combinations of blocks in theflowchart illustrations and/or block diagrams, can be implemented bycomputer program instructions. These computer program instructions maybe provided to a processor of a general purpose computer, specialpurpose computer, and/or other programmable data processing apparatus toproduce a machine, such that the instructions, which execute via theprocessor of the computer or other programmable data processingapparatus, create means for implementing the functions/acts specified inthe flowchart and/or block diagram block or blocks.

These computer program instructions may also be stored on computerreadable storage media is not a transitory signal, such that the programinstructions can direct a computer, other programmable data processingapparatus, or other devices to function in a particular manner, and suchthat the program instructions stored in the computer readable storagemedium produce an article of manufacture.

The computer program instructions may also be loaded onto a computer,other programmable data processing apparatus, or other devices to causea series of operational steps to be performed on the computer, otherprogrammable apparatus or other devices to produce a computerimplemented process such that the instructions which execute on thecomputer or other programmable apparatus provide processes forimplementing the functions/acts specified in the flowchart and/or blockdiagram block or blocks.

The flowchart and block diagrams in the Figures illustrate thearchitecture, functionality, and operation of possible implementationsof systems, methods and computer program products. In this regard, eachblock in the flowchart or block diagrams may represent a module,segment, or portion of code, which comprises one or more executableinstructions for implementing the specified logical function(s). Itshould also be noted that, in some alternative implementations, thefunctions noted in the block may occur out of the order noted in thefigures. For example, two blocks shown in succession may, in fact, beexecuted substantially concurrently, or the blocks may sometimes beexecuted in the reverse order, depending upon the functionalityinvolved. It will also be noted that each block of the block diagramsand/or flowchart illustration, and combinations of blocks in the blockdiagrams and/or flowchart illustration, can be implemented by specialpurpose hardware-based systems that perform the specified functions oracts, or combinations of special purpose hardware and computerinstructions.

The terminology used herein is for the purpose of describing particularembodiments only and is not intended to limit the scope of the claims.As used herein, the singular forms “a”, “an” and “the” are intended toinclude the plural forms as well, unless the context clearly indicatesotherwise. It will be further understood that the terms “comprises”and/or “comprising,” when used in this specification, specify thepresence of stated features, integers, steps, operations, elements,components and/or groups, but do not preclude the presence or additionof one or more other features, integers, steps, operations, elements,components, and/or groups thereof. The terms “preferably,” “preferred,”“prefer,” “optionally,” “may,” and similar terms are used to indicatethat an item, condition or step being referred to is an optional (notrequired) feature of the embodiment.

The corresponding structures, materials, acts, and equivalents of allmeans or steps plus function elements in the claims below are intendedto include any structure, material, or act for performing the functionin combination with other claimed elements as specifically claimed.Embodiments have been presented for purposes of illustration anddescription, but it is not intended to be exhaustive or limited to theembodiments in the form disclosed. Many modifications and variationswill be apparent to those of ordinary skill in the art after readingthis disclosure. The disclosed embodiments were chosen and described asnon-limiting examples to enable others of ordinary skill in the art tounderstand these embodiments and other embodiments involvingmodifications suited to a particular implementation.)

What is claimed is:
 1. A computer program product comprising anon-volatile computer readable medium and non-transitory programinstructions embodied therein, the program instructions being configuredto be executable by a processor to cause the processor to performoperations comprising: running a web server on a virtual machine that isrunning a software application and an operating system that supports thesoftware application; causing the operating system to obtain and provideservice data for the software application after failure of the softwareapplication; causing the web server to receive the service data from theoperating system; and causing the web server to send the service data toan entity that is outside the virtual machine.
 2. The computer programproduct of claim 1, wherein the operating system does not support acryptographic network protocol or has all supported cryptographicnetwork protocols disabled.
 3. The computer program product of claim 1,wherein causing the operating system to obtain and provide the servicedata comprises instructing the operating system to execute a command onthe software application, and wherein the service data comprises datathat the operating system obtains as a result of executing the commandon the software application.
 4. The computer program product of claim 1,wherein the service data for the software application includes operatingdata for the software application leading up to a failure of thesoftware application.
 5. The computer program product of claim 4,wherein the service data is stored in a predetermined directory.
 6. Thecomputer program product of claim 4, wherein the service data is a FirstFailure Data Capture file.
 7. The computer program product of claim 1,wherein the causing the operating system to obtain and provide servicedata for the software application is in response to receiving aninstruction from a user computer.
 8. The computer program product ofclaim 7, the operations further comprising: causing the web server togenerate a user interface page for display on a web browser running on auser computer, wherein the causing the operating system to obtain andprovide service data is in response to input received through the userinterface page.
 9. The computer program product of claim 7, wherein thecausing the web server to send the service data comprises causing theweb server to send the service data to the user computer in response toreceiving an access code from the user computer that matches an accesscode required by the web server.
 10. The computer program product ofclaim 9, the operations further comprising: obtaining an identifier forthe software application; and generating the required access code byapplying a predetermined operation to the identifier.
 11. The computerprogram product of claim 10, wherein the identifier is a universallyunique identifier.
 12. The computer program product of claim 10, whereinapplying a predetermined operation to the identifier comprises applyinga predetermined operation to the identifier and a current date.
 13. Thecomputer program product of claim 1, wherein the software applicationand the operating system are included in a software appliance.
 14. Thecomputer program product of claim 13, wherein the entity that is outsidethe virtual machine is a user computer.
 15. An apparatus comprising: atleast one non-volatile storage device storing program instructions; andat least one processor configured to process the program instructions,wherein the program instructions are configured to, when processed bythe at least one processor, cause the apparatus to perform operationscomprising: running a web server on a virtual machine that is running asoftware application and an operating system that supports the softwareapplication; causing the operating system to obtain and provide servicedata for the software application after failure of the softwareapplication; causing the web server to receive the service data from theoperating system; and causing the web server to send the service data toan entity that is outside the virtual machine.
 16. The apparatus ofclaim 15, wherein the operating system does not support a cryptographicnetwork protocol or has all supported cryptographic network protocolsdisabled.
 17. The apparatus of claim 15, wherein the service data forthe software application includes operating data for the softwareapplication leading up to a failure of the software application.
 18. Theapparatus of claim 15, wherein the causing the operating system toobtain and provide service data for the software application is inresponse to receiving an instruction from a user computer and receivesan access code from the user computer that matches an access coderequired by the web server.
 19. The apparatus of claim 15, theoperations further comprising: causing the web server to generate a userinterface page for display on a web browser running on a user computer,wherein the causing the operating system to obtain and provide servicedata is in response to input received through the user interface page.20. The apparatus of claim 15, wherein the causing the web server tosend the service data comprises causing the web server to send theservice data to the user computer in response to receiving an accesscode from the user computer that matches an access code required by theweb server.